Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa
File:                     06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa (raw, json)
Hash identifier:          gznMDF8zdmQd0+qww9UWqQlcC+5Pnod7APMyYgFIg1M=
Subject key identifier:   03:43:2A:E3:72:17:E8:1E:EB:DC:D1:76:B6:73:D0:90:A9:8F:A8:29
Certificate issuer:       /CN=28aae7db-2f51-4656-bba0-64f1d3ee3256
Certificate serial:       010D0C9F432858459A6343BAA7F550074CF10AE4
Authority key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa
Signing time:             Sat 20 Apr 2024 01:00:26 +0000
ROA not before:           Sat 20 Apr 2024 01:00:26 +0000
ROA not after:            Fri 19 Jul 2024 01:00:26 +0000
asID:                     30158
IP address blocks:        199.189.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:63:43:ba:a7:f5:50:07:4c:f1:0a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256
        Validity
            Not Before: Apr 20 01:00:26 2024 GMT
            Not After : Jul 19 01:00:26 2024 GMT
        Subject: CN=38f1aa9b-539d-4988-be33-2ea717c4c3bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:06:29:fd:a0:fb:48:bc:14:69:4c:65:21:37:
                    2d:7d:75:21:ac:c8:81:1d:bc:eb:3d:e8:88:9d:51:
                    13:23:0e:72:46:54:15:3f:a4:8f:18:52:de:d6:c2:
                    fa:4c:88:07:26:cb:d7:90:1b:ad:74:bd:f3:81:a2:
                    83:5e:f9:05:1d:f2:95:e5:0e:f6:97:a8:23:8f:59:
                    ee:2c:72:00:34:91:15:a9:c3:21:f4:a5:49:b0:c7:
                    04:0f:da:52:67:87:ab:39:84:d0:7a:fc:a6:44:b1:
                    35:6d:b8:70:1b:34:7d:b9:e0:d1:8b:3d:e9:0c:a8:
                    e2:65:ed:23:6c:98:bb:5c:b4:18:04:b9:df:6f:e8:
                    13:43:6a:3d:2e:90:3f:77:52:f9:15:78:53:ad:33:
                    74:ec:66:9a:a4:a4:92:44:02:c3:76:64:8a:d3:50:
                    0f:89:10:00:52:e6:87:c9:13:f0:62:ab:95:58:93:
                    8a:5d:f6:72:17:f8:98:14:b7:0b:08:35:95:a0:10:
                    12:62:77:93:2f:4c:fd:25:21:b1:1e:44:52:7a:53:
                    9c:8b:2a:b8:44:fc:f8:f7:3b:ec:3e:3b:e7:f6:01:
                    c3:04:aa:58:d6:1f:42:81:86:be:09:e1:47:39:ac:
                    04:fd:4b:c1:87:0f:55:c0:3a:c2:e1:5e:4c:01:9c:
                    1a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:43:2A:E3:72:17:E8:1E:EB:DC:D1:76:B6:73:D0:90:A9:8F:A8:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl

            X509v3 Authority Key Identifier:
                keyid:8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:7b:65:e7:e6:09:bd:1b:59:ad:1e:db:a1:2b:a4:35:16:25:
         5f:87:c7:dd:dc:0c:e3:b1:0e:15:2a:13:9f:4f:a3:dd:85:69:
         b3:28:81:e1:bc:c0:5c:b5:bf:a0:64:65:a9:4e:29:22:be:90:
         1e:06:74:8c:7d:88:81:3f:a3:c2:24:45:ae:36:fe:8d:61:0d:
         b3:be:65:d3:5d:f6:fc:18:a4:a9:78:b9:54:af:c5:52:40:42:
         7d:87:a5:69:bc:4d:81:64:bf:e0:bc:26:bf:da:90:e0:5f:e2:
         9b:fe:06:c6:62:2f:a1:68:8f:95:80:4d:c8:00:cf:0a:10:50:
         71:65:51:87:f5:bb:a9:fc:3a:98:59:6c:8d:b3:52:40:82:49:
         6a:fa:0d:b1:ad:5b:a1:65:e9:36:bd:0c:ca:16:dc:c8:aa:b4:
         90:8d:1c:98:6c:87:35:4a:92:87:5c:f5:5b:c5:bc:1c:6c:14:
         4a:17:b0:fb:31:42:2e:b0:ff:8f:85:9c:05:08:1f:33:4e:22:
         7d:ee:36:20:aa:44:69:89:da:63:61:1c:c3:d9:5d:3e:1b:aa:
         35:e2:fa:7f:c3:2b:b8:9a:b8:ad:92:dd:76:92:d2:53:15:82:
         97:5f:7c:19:34:e0:11:68:f5:75:45:72:3c:13:3e:24:f9:6f:
         cc:6e:20:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:00:12 2024 by rpki-client on console-fra.rpki-client.org